IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

1
vote
0answers
468 views

Deciphering IPSEC errors

I have a host I am trying to setup for ipsec. But I am finding some errors in the log that don't make much sense to me. The system are Rhel 5.5 boxes. I followed RHEL's IPSec deployment directions ...
1
vote
0answers
446 views

IPSec VPN : Traffic not routing correctly

We have a server which is windows 2008 running on a VPS with a single public IP address. I've configured the firewall to allow IPSEC VPN connections to be established with our Draytek routers at ...
1
vote
0answers
114 views

My IPSec VPN isn't allowing me to connect

I'm following this guide to create an IPsec VPN on a debian server. I followed all the steps, and it still isn't working. If I try connecting to it, I get an error. I've looked for the logs, but I'm ...
1
vote
0answers
18 views

Issues with enpoint mapper service

In short, we have a VPN server and an AD server. The VPN server is our connection to a remote AD server. From the VPN server, I can use port query to verify that port 135 is not filtered and it ...
1
vote
0answers
72 views

Is there a way to have VPNC failover automatically to a second Cisco firewall?

I'm currently using VPNC on my Ubuntu machine to VPN to a remote Cisco firelwall. It's critical for this VPN connection to be up at all time. Is there a way to have VPNC failover automatically to a ...
1
vote
0answers
379 views

Cisco with site-to-site and EzVPN - configuration Issue

This is the first time for me to work with Cisco Router. The below mentioned is my configuration where Cisco Srv is Cisco 7200 Series Router XYZ is one VPN Server running on Linux. RAC is ...
1
vote
0answers
304 views

Cisco RV220W ipsec with wrong ip packets

I just setted up a IPSEC lan to lan ipsec connection and since our local ip ranges colide with the remote network, I setted the local ip in the VPN police to be our external wan ip. The vpn tunnel is ...
1
vote
0answers
347 views

SMB over IPSec prompting for credentials

I am trying to connect our web server to customers SQL/file server through a VPN tunnel. Originally we had setup a PPTP VPN and I was able to access their file shares without issue. Since PPTP ...
1
vote
0answers
3k views

Cisco ASA - Duplicate ISAKMP SA - REKEYs

I have an issue with IPSEC VPNs where a single endpoint generates multiple ISAKMP SAs. (in my examples I have replaced the IPs - 1.1.1.1 is the remote endpoint, 10.10.10.10 is an object on the remote ...
1
vote
0answers
2k views

IPSec VPN login failing with certificate authentication

I am working on an IPSec VPN solution allowing iPhones / iPads to connect to a Linux server running Gentoo. I have been able to get the VPN functioning as expected using PSK authentication (PSK + ...
1
vote
0answers
423 views

ipsec tunnel connectivity issue

I trying to connect Solaris 10 box to Cisco PIX with IPsec tunnel. And it seem halt at some point. And from the post @ http://www.mail-archive.com/networking-discuss@opensolaris.org/msg07573.html ...
1
vote
0answers
2k views

Openswan Ubuntu Malformed Packet

I'm trying to create an IPSec encrypted VPN tunnel to a Cisco ASA 5540 from a ubuntu server using openswan. I've set up VPN connections before to Cisco routers, so this task didn't seem like it would ...
1
vote
0answers
572 views

How to allow RDP through IPSEC using netsh advfirewall command

I have an offsite windows server 2008 R2 server. And an ipsec tunnel set on our router here plus a connection security rule in Advanced Firewall on the server. I have ssh access to the console on the ...
1
vote
0answers
263 views

Trouble connecting my server to a firefwall trough VPN

I have a server running Ubuntu and Openswan, but I'm not able to connect to the remote firewall. I hope that anybody can help me. My ipsec.conf-file is as follows: config setup protostack=netkey ...
1
vote
0answers
530 views

IPsec tunnels between Linux and Solaris

I have a Solaris machine sitting out in the ether somewhere that I would like to make part of my network via IPsec. I have this working between Solaris machines but not between Solaris and Linux. I ...
1
vote
0answers
150 views

Windows IPSec Filter Sanity Check

I'm installing NSClient++ so our Nagios system can monitor some windows servers using NRPE. I need to punch a hole in our IPSec policy to allow inbound connections on port 5666 from the Nagios server. ...
1
vote
0answers
931 views

StrongSwan - Windows 7 0 IPSec IKEv2 connection problems

I am trying to configure a roadwarrior scenario between a linux box with StrongSwan and a Windows Box with Agile VPN. I successfully configured my StrongSwan and my Windows box to connect. The Windows ...
0
votes
0answers
24 views

L2TP + IPSec pfSense: can ping, no access

I am in process of setting up a L2TP + IPSec VPN (site to client) server based on pfSense. While being connected to the VPN, I am able to ping any of the resources (e.g google.com, as well as anybody ...
0
votes
0answers
16 views

IPSec Tunnel AWS VPC <-> openSwan CentOS 6.6 Tunnel up, no traffic

I managed to get a tunnel up between a CentOS 6.6 box and our AWS VPC. It shows as connected on the box, and in AWS, but the problem is routing the traffic from the server. Everything I've tried ...
0
votes
0answers
6 views

OpenSwan IPSec tunnel not routing correctly

I am trying to enable site-to-site connectivity between my network and a Windows Azure network. I have configured openswan in the local network and service ipsec status reports that the tunnel is up ...
0
votes
0answers
12 views

IPSec offload in Windows Server 2012 R2 with teaming

I'm interested in exploiting IPSec offloading in Windows. It is for implementing a custom PPP over L2TP/IPSec solution. Microsoft Windows VPN features are not suitable for the task, because I'm ...
0
votes
0answers
11 views

How does IPSec right=%any setup the SA?

I've seen lots of examples where each gateway in an IPSec is configured with right=%any. I'm perplexed how these gateways find the IP to connect to (assuming both gateways are set up that way). The ...
0
votes
0answers
34 views

strongswan/centos7: Don't get answer from other side (but IPSEC connection seems OK…)

My question: I can't access the other side server to get service, no ping, no telnet working. Is there something wrong on my side? I have problem with Strongswan on centos 7 (compiled version 5.3.2). ...
0
votes
0answers
31 views

L2TP\IPSec PSK server in Windows Server 2012 R2 not working

Im trying to get Windows Server 2012 R2 to work as a L2TP\IPSec PSK server and I feel that Im doing everything correctly but it seems that either it does not authenticate or there is something wrong ...
0
votes
0answers
53 views

Android client to Windows Server 2012 R2 VPN IPSec: Firewall says “No proposal chosen”

Im trying to connect my Android device (5.0.2) to my Windows Server 2012 R2 IPSec VPN but the firewall pops up a error saying "No Proposal Chosen". Ive looked around and it seems the encryption is ...
0
votes
0answers
31 views

asa5512x: ipsec site-to-site vpn with tcp instead of udp? is it possible?

the cisco documentation for ASA 9.1 (I have 9.1.2) seems to imply that ipsec vpn with tcp/ip is only for remote clients, not site to site vpn. But I repeatedly see people mention vpn over tcp to ...
0
votes
0answers
75 views

VPN to Server 2012R2 with IKE behind NAT

I am having trouble to set up a VPN Tunnel from a Sonicwall TZ 100 to Windows Server 2012R2. I follow the guide from there Configuring a Site-to-Site VPN tunnel in SonicOS Enhanced firmware using ...
0
votes
0answers
89 views

Ubuntu 14.04 Cant connect to openswan/xl2tpd/IPsec VPN via iOS

I am setting up a VPN using openswan, xl2tpd, and IPsec and i am getting issues with connecting via an iOS device with the error "You were disconnected by the communication device". This is configured ...
0
votes
0answers
35 views

How to forward traffic from ipsec host to local network?

Could anybody explain how to implement forward traffic from host in IPsec to local network. On my server I have 3 network cards: red0 - extern orange0 - dmz green0 - local IPsec builds through ...
0
votes
0answers
128 views

Windows Phone 8.1 client unable to connect to Ubuntu VPN server (L2TP with IPsec)

I have set up an L2TP + IPsec VPN server on my Ubuntu server (14.04.2 64bit) using openswan. I got it working with Android and Windows 8.1 clients, though Windows 8.1 required some tweaking. When ...
0
votes
0answers
41 views

Self Signed Certificate for RDP over Internet - Why Not?

I was recently informed on SF that using a self-signed certificate for RDP over a public interface is not recommended. In this particular scenario, I'd like to understand more about why. The ...
0
votes
0answers
30 views

It is possible to make an IPSEC VPN Bonding?

I wanted to know if It is possible to bound two IPSEC tunnels ? I've already done a VPN bonding of SSH tunnels, but It will be better if I use IPSEC.
0
votes
0answers
48 views

IPsec, PepVPN, SpeedFusion Hot Failover and SpeedFusion Bonding (PepLink Load balancer)

I was looking for the difference between IPsec, PepVPN, SpeedFusion Hot Failover and SpeedFusion Bonding (PepLink Load balancer) but i can't find something well explained. I'll be glad if someone can ...
0
votes
0answers
183 views

Site-to site Configuration between OpenSwan and Cisco ASA

I am making site-to-site vpn connection using amazon ec2 linux and cisco asa router ( please note i donot have access to router only configuration is provided.) CISCO ASA CONFIGURATION : ...
0
votes
0answers
94 views

racoon Road Warrior VPN Client - Tunnel Established but no ping

I'm trying to configure a road warrior VPN client on a Linux distribution. Here my configuraiton : Client VPN LINUX - 1.1.1.1 - INTERNET - 2.2.2.2 - FireWall - 10.0.0.0/8 I wish to create a tunnel ...
0
votes
0answers
30 views

IPSEC for RDP Connections

I am stuck with a wired problem, I am trying to achieve a functionality in which if a certificate is not installed on a system that system won't able to remote desktop the server, he won't even see ...
0
votes
0answers
80 views

openswan initiating from wrong IP, but answers with the right one

I'm running a Debian 7.8 openswan 1:2.6.37-3+deb7u1 server with one external interface, but many different aliases : inet xxx.xxx.xxx.94/24 brd xxx.xxx.xxx.255 scope global eth1 inet ...
0
votes
0answers
52 views

strongSwan on Angstrom

My problem is to establish a VPN tunnel between cRIO 9068 and a Cisco router. To accomplish this task I was planning to install strongswan on cRIO (opkg install strongswan). I have installed it on ...
0
votes
0answers
254 views

subnet-to-subnet libreswan ipsec vpn

I'm configuring a "subnet to subnet VPN" between two Centos 7 server using libreswan. Each server has two nic as showed in the following image. I would allow secure communication between the subnets ...
0
votes
0answers
93 views

iptables DNAT packets into an openswan IPSEC tunnel

I have the following network setup: +-----------------------------------+ | | ...
0
votes
0answers
34 views

Changing default encryption for OS X IPSec Client

We have two MacBooks -- one with Yosemite (10.10.2) and one with OS X Lion. IPSec to the office works from one but not from the other and the root cause seems to be that Yosemite uses AES as the ...
0
votes
0answers
124 views

Strongswan transport mode ipsec within subnet

Is there any way to configure strongswan to automatically start encryption to a given subnet rather than specific host? For example, if I know that my hosts at w.x.y.z/28 will be have the same PSK ...
0
votes
0answers
374 views

VyOS / Vyatta multiple CIDR blocks on one side of IPSec tunnel

I am attempting to link an AWS VPC to a datacenter using the community VyOS AMI and IPSec tunneling, talking to a SonicWall device that I don't control. I've been given the proper settings to ...
0
votes
0answers
88 views

Optimizing Pfsense IPSec VPN for a high latency environment

I have two PFsense routers connecting two networks with high latency between them. What can I adjust to improve file transfers between these two networks?
0
votes
0answers
180 views

Configuring OpenSwan for IKEv2 (via iOS8)

I'm trying to configure OpenSwan (running on Ubuntu) to accept connections from an iOS8 device. I receive the following logs, which seems to indicate the server denies IKEv2 connections (even though ...
0
votes
0answers
47 views

L2TP daemon server multiple IP

I have VPS with 3 public IP - Debian 7. I would like to have 3 L2TP damemons (one ip each) NATing traffic to each ip. Something like this l2tp_multiple_public_ip_diagram. I have set up l2tp daemon for ...
0
votes
0answers
31 views

Multihomed Windows 2003 IPsec tunnel source IP address

As Windows 2003 EOL comes near, I'm starting to disband old machines still active in my network. Now one of these is in a branch office and used as RRAS server just for servicing a VPN connection to ...
0
votes
0answers
128 views

MikroTik L2TP\IPsec along with IPsec tunnels

How to configure L2TP\IPsec whit IPsec working along? I have looked many tutorials, but none of them was explaining how to setup L2TP\IPsec while IPsec tunnels are running. L2TP\IPsec VPN will be used ...
0
votes
0answers
25 views

SQL 2012 IPSec or SSL

I have a requirement to secure connections to SQL server. (at transit that is) - TDE will be used for encryption at rest. SQL provides two options which are either certificate based SSL or Windows ...
0
votes
0answers
37 views

openswan - computing tunnel count?

When I do an /etc/init.d/ipsec status I see: pluto pid 10435 12 tunnels up some eroutes exist Question is how can I compute ahead of time how many tunnels will exist? I have one site-to-site that ...